SOC Analyst

Security Monitoring:

Continuously monitor security tools and systems, including SIEM (Security Information and Event Management), IDS/IPS, and firewalls, to detect potential security threats.

Investigate security alerts, triage incidents, and identify false positives in a timely manner.

Incident Response

 Respond to security incidents by gathering, analysing, and documenting evidence.

Conduct initial incident triage and escalation, coordinating with appropriate teams for further investigation and remediation.

 Provide timely updates on security incidents to management and stakeholders.

 Threat Intelligence:

Analyse and correlate threat intelligence data to detect emerging threats and vulnerabilities.

Stay updated with the latest security trends, attack vectors, and threat actor techniques

 Reporting & Documentation:

 Maintain accurate incident logs and documentation for audit purposes and regulatory compliance.

Generate reports on security incidents, trends, and metrics for management.

Understanding of common attack vectors (e.g., phishing, malware, DDoS, etc.).
Experience with log analysis, incident response, and forensic investigations.
Knowledge of network protocols and services (e.g., TCP/IP, DNS, HTTP, etc.).
Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, CIS).

Strong problem-solving and analytical skills.
Excellent communication skills, both written and verbal.
Ability to work well under pressure and in a fast-paced environment.
Attention to detail and a proactive approach to security.

3-4 years of experience in cybersecurity, particularly in a SOC or similar security role.
Familiarity with security tools (e.g., SIEM, IDS/IPS, firewalls, endpoint security, vulnerability scanners).